CVE-2013-2238: Buffer Overflow
Multiple buffer overflows in the switchperformsubstitution function in switchregex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2238?
CVE-2013-2238 is considered a high severity vulnerability due to its potential to cause denial of service and allow arbitrary code execution.
How do I fix CVE-2013-2238?
To fix CVE-2013-2238, update FreeSWITCH to version 1.2.1 or later where the vulnerability has been addressed.
What types of attacks can be performed using CVE-2013-2238?
CVE-2013-2238 allows remote attackers to exploit buffer overflows which can lead to denial of service attacks and potentially execute arbitrary code.
Which versions of FreeSWITCH are affected by CVE-2013-2238?
FreeSWITCH version 1.2 is affected by CVE-2013-2238, and users should upgrade to a secure version.
What is the vulnerability type of CVE-2013-2238?
CVE-2013-2238 is classified as a buffer overflow vulnerability in the switch_perform_substitution function.